aboutsummaryrefslogtreecommitdiffstats
path: root/etc
diff options
context:
space:
mode:
authorLibravatar Your Name <you@example.com>2017-09-19 18:48:37 -0400
committerLibravatar Your Name <you@example.com>2017-09-19 18:48:37 -0400
commitcbbfcfd59519c555c8e4a347bf0d4e20ab717cd5 (patch)
treee45042ed1ea7db24f79ea658cc626cd03a994952 /etc
parentMerge pull request #1555 from SpotComms/upstream (diff)
downloadfirejail-cbbfcfd59519c555c8e4a347bf0d4e20ab717cd5.tar.gz
firejail-cbbfcfd59519c555c8e4a347bf0d4e20ab717cd5.tar.zst
firejail-cbbfcfd59519c555c8e4a347bf0d4e20ab717cd5.zip
1 LIST
Diffstat (limited to 'etc')
-rw-r--r--etc/7z.profile1
-rw-r--r--etc/atom.profile3
-rw-r--r--etc/calligra.profile3
-rw-r--r--etc/cin.profile2
-rw-r--r--etc/cinelerra.profile31
-rw-r--r--etc/cliqz.profile83
-rw-r--r--etc/dia.profile1
-rw-r--r--etc/evince.profile1
-rw-r--r--etc/hugin.profile1
-rw-r--r--etc/inkscape.profile2
-rw-r--r--etc/inox.profile4
-rw-r--r--etc/kdenlive.profile2
-rw-r--r--etc/libreoffice.profile1
-rw-r--r--etc/natron.profile1
-rw-r--r--etc/openshot-qt.profile31
-rw-r--r--etc/pinta.profile33
-rw-r--r--etc/scribus.profile1
-rw-r--r--etc/shotcut.profile2
-rw-r--r--etc/synfigstudio.profile3
-rw-r--r--etc/tar.profile1
-rw-r--r--etc/unrar.profile1
-rw-r--r--etc/unzip.profile1
22 files changed, 203 insertions, 6 deletions
diff --git a/etc/7z.profile b/etc/7z.profile
index ea67bbe19..53900bae6 100644
--- a/etc/7z.profile
+++ b/etc/7z.profile
@@ -17,6 +17,7 @@ notv
17novideo 17novideo
18shell none 18shell none
19tracelog 19tracelog
20caps.drop all
20 21
21private-dev 22private-dev
22 23
diff --git a/etc/atom.profile b/etc/atom.profile
index 8629c3dd8..6fb6048b6 100644
--- a/etc/atom.profile
+++ b/etc/atom.profile
@@ -5,6 +5,8 @@ include /etc/firejail/atom.local
5# Persistent global definitions 5# Persistent global definitions
6include /etc/firejail/globals.local 6include /etc/firejail/globals.local
7 7
8noexec ${HOME}
9noexec /tmp
8noblacklist ~/.atom 10noblacklist ~/.atom
9noblacklist ~/.config/Atom 11noblacklist ~/.config/Atom
10 12
@@ -23,6 +25,7 @@ notv
23novideo 25novideo
24protocol unix,inet,inet6,netlink 26protocol unix,inet,inet6,netlink
25seccomp 27seccomp
28net none
26shell none 29shell none
27 30
28private-dev 31private-dev
diff --git a/etc/calligra.profile b/etc/calligra.profile
index e90c8efe8..8c7e49121 100644
--- a/etc/calligra.profile
+++ b/etc/calligra.profile
@@ -21,9 +21,10 @@ novideo
21protocol unix 21protocol unix
22seccomp 22seccomp
23shell none 23shell none
24net none
24 25
25private-bin calligra,calligraauthor,calligraconverter,calligraflow,calligraplan,calligraplanwork,calligrasheets,calligrastage,calligrawords,dbus-launch 26private-bin calligra,calligraauthor,calligraconverter,calligraflow,calligraplan,calligraplanwork,calligrasheets,calligrastage,calligrawords,dbus-launch
26private-dev 27private-dev
27 28
28noexec ${HOME} 29#noexec ${HOME}
29noexec /tmp 30noexec /tmp
diff --git a/etc/cin.profile b/etc/cin.profile
index eeeda476f..93a94c910 100644
--- a/etc/cin.profile
+++ b/etc/cin.profile
@@ -24,7 +24,7 @@ protocol unix
24seccomp 24seccomp
25shell none 25shell none
26 26
27#private-bin cin 27private-bin cin
28private-dev 28private-dev
29 29
30noexec ${HOME} 30noexec ${HOME}
diff --git a/etc/cinelerra.profile b/etc/cinelerra.profile
new file mode 100644
index 000000000..bd75a66a9
--- /dev/null
+++ b/etc/cinelerra.profile
@@ -0,0 +1,31 @@
1# Firejail profile for cin
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/cin.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7
8noblacklist ${HOME}/.bcast
9
10include /etc/firejail/disable-common.inc
11include /etc/firejail/disable-devel.inc
12include /etc/firejail/disable-passwdmgr.inc
13include /etc/firejail/disable-programs.inc
14
15caps.drop all
16ipc-namespace
17net none
18nodvd
19nogroups
20nonewprivs
21notv
22noroot
23protocol unix
24seccomp
25shell none
26
27private-bin cinelerra
28private-dev
29
30noexec ${HOME}
31noexec /tmp
diff --git a/etc/cliqz.profile b/etc/cliqz.profile
new file mode 100644
index 000000000..9c0f44e97
--- /dev/null
+++ b/etc/cliqz.profile
@@ -0,0 +1,83 @@
1# Firejail profile for firefox
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/firefox.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7
8noblacklist ~/.cache/cliqz
9noblacklist ~/.config/cliqz
10noblacklist ~/.config/okularpartrc
11noblacklist ~/.config/okularrc
12noblacklist ~/.config/qpdfview
13noblacklist ~/.kde/share/apps/okular
14noblacklist ~/.kde/share/config/okularpartrc
15noblacklist ~/.kde/share/config/okularrc
16noblacklist ~/.kde4/share/apps/okular
17noblacklist ~/.kde4/share/config/okularpartrc
18noblacklist ~/.kde4/share/config/okularrc
19noblacklist ~/.local/share/gnome-shell/extensions
20noblacklist ~/.local/share/okular
21noblacklist ~/.local/share/qpdfview
22
23noblacklist ~/.pki
24
25include /etc/firejail/disable-common.inc
26include /etc/firejail/disable-devel.inc
27include /etc/firejail/disable-programs.inc
28
29mkdir ~/.cache/mozilla/firefox
30mkdir ~/.mozilla
31mkdir ~/.pki
32whitelist ${DOWNLOADS}
33whitelist ~/.cache/gnome-mplayer/plugin
34whitelist ~/.cache/mozilla/firefox
35whitelist ~/.config/gnome-mplayer
36whitelist ~/.config/okularpartrc
37whitelist ~/.config/okularrc
38whitelist ~/.config/pipelight-silverlight5.1
39whitelist ~/.config/pipelight-widevine
40whitelist ~/.config/qpdfview
41whitelist ~/.kde/share/apps/okular
42whitelist ~/.kde/share/config/okularpartrc
43whitelist ~/.kde/share/config/okularrc
44whitelist ~/.kde4/share/apps/okular
45whitelist ~/.kde4/share/config/okularpartrc
46whitelist ~/.kde4/share/config/okularrc
47whitelist ~/.keysnail.js
48whitelist ~/.lastpass
49whitelist ~/.local/share/gnome-shell/extensions
50whitelist ~/.local/share/okular
51whitelist ~/.local/share/qpdfview
52whitelist ~/.mozilla
53whitelist ~/.pentadactyl
54whitelist ~/.pentadactylrc
55whitelist ~/.pki
56whitelist ~/.vimperator
57whitelist ~/.vimperatorrc
58whitelist ~/.wine-pipelight
59whitelist ~/.wine-pipelight64
60whitelist ~/.zotero
61whitelist ~/dwhelper
62include /etc/firejail/whitelist-common.inc
63include /etc/firejail/whitelist-var-common.inc
64
65caps.drop all
66netfilter
67nodvd
68nogroups
69nonewprivs
70noroot
71notv
72protocol unix,inet,inet6,netlink
73seccomp
74shell none
75tracelog
76
77# private-bin firefox,which,sh,dbus-launch,dbus-send,env
78private-dev
79# private-etc passwd,group,hostname,hosts,localtime,nsswitch.conf,resolv.conf,xdg,gtk-2.0,gtk-3.0,X11,pango,fonts,firefox,mime.types,mailcap,asound.conf,pulse
80private-tmp
81
82noexec ${HOME}
83noexec /tmp
diff --git a/etc/dia.profile b/etc/dia.profile
index abe83ac8c..6915318c0 100644
--- a/etc/dia.profile
+++ b/etc/dia.profile
@@ -25,6 +25,7 @@ novideo
25protocol unix 25protocol unix
26seccomp 26seccomp
27shell none 27shell none
28net none
28 29
29disable-mnt 30disable-mnt
30#private-bin dia 31#private-bin dia
diff --git a/etc/evince.profile b/etc/evince.profile
index f503b9a8e..5e7596352 100644
--- a/etc/evince.profile
+++ b/etc/evince.profile
@@ -28,6 +28,7 @@ protocol unix
28seccomp 28seccomp
29shell none 29shell none
30tracelog 30tracelog
31net none
31 32
32private-bin evince,evince-previewer,evince-thumbnailer 33private-bin evince,evince-previewer,evince-thumbnailer
33private-dev 34private-dev
diff --git a/etc/hugin.profile b/etc/hugin.profile
index ff88e0d5c..dd7e326c6 100644
--- a/etc/hugin.profile
+++ b/etc/hugin.profile
@@ -24,6 +24,7 @@ novideo
24protocol unix 24protocol unix
25seccomp 25seccomp
26shell none 26shell none
27net none
27 28
28private-bin PTBatcherGUI,calibrate_lens_gui,hugin,hugin_stitch_project,align_image_stack,autooptimiser,celeste_standalone,checkpto,cpclean,cpfind,deghosting_mask,fulla,geocpset,hugin_executor,hugin_hdrmerge,hugin_lensdb,icpfind,linefind,nona,pano_modify,pano_trafo,pto_gen,pto_lensstack,pto_mask,pto_merge,pto_move,pto_template,pto_var,tca_correct,verdandi,vig_optimize,enblend 29private-bin PTBatcherGUI,calibrate_lens_gui,hugin,hugin_stitch_project,align_image_stack,autooptimiser,celeste_standalone,checkpto,cpclean,cpfind,deghosting_mask,fulla,geocpset,hugin_executor,hugin_hdrmerge,hugin_lensdb,icpfind,linefind,nona,pano_modify,pano_trafo,pto_gen,pto_lensstack,pto_mask,pto_merge,pto_move,pto_template,pto_var,tca_correct,verdandi,vig_optimize,enblend
29private-dev 30private-dev
diff --git a/etc/inkscape.profile b/etc/inkscape.profile
index c062ab8ef..04c1020ab 100644
--- a/etc/inkscape.profile
+++ b/etc/inkscape.profile
@@ -27,7 +27,7 @@ protocol unix
27seccomp 27seccomp
28shell none 28shell none
29 29
30#private-bin inkscape 30private-bin inkscape,potrace
31private-dev 31private-dev
32private-tmp 32private-tmp
33 33
diff --git a/etc/inox.profile b/etc/inox.profile
index 6273c4de6..ec8d12387 100644
--- a/etc/inox.profile
+++ b/etc/inox.profile
@@ -24,3 +24,7 @@ include /etc/firejail/whitelist-common.inc
24netfilter 24netfilter
25nodvd 25nodvd
26notv 26notv
27nogroups
28noroot
29shell none
30caps.keep sys_chroot,sys_admin \ No newline at end of file
diff --git a/etc/kdenlive.profile b/etc/kdenlive.profile
index a1a5f957c..10c2909a0 100644
--- a/etc/kdenlive.profile
+++ b/etc/kdenlive.profile
@@ -26,5 +26,5 @@ private-bin kdenlive,kdenlive_render,dbus-launch,melt,ffmpeg,ffplay,ffprobe,dvda
26private-dev 26private-dev
27#private-etc fonts,alternatives,X11,pulse,passwd 27#private-etc fonts,alternatives,X11,pulse,passwd
28 28
29noexec ${HOME} 29#noexec ${HOME}
30noexec /tmp 30noexec /tmp
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile
index 8d05a557c..9acdc3789 100644
--- a/etc/libreoffice.profile
+++ b/etc/libreoffice.profile
@@ -27,6 +27,7 @@ protocol unix,inet,inet6
27seccomp 27seccomp
28shell none 28shell none
29tracelog 29tracelog
30net none
30 31
31private-dev 32private-dev
32 33
diff --git a/etc/natron.profile b/etc/natron.profile
index d77539d83..b76649605 100644
--- a/etc/natron.profile
+++ b/etc/natron.profile
@@ -26,6 +26,7 @@ notv
26protocol unix,inet,inet6 26protocol unix,inet,inet6
27seccomp 27seccomp
28shell none 28shell none
29net none
29 30
30private-bin natron,Natron,NatronRenderer 31private-bin natron,Natron,NatronRenderer
31 32
diff --git a/etc/openshot-qt.profile b/etc/openshot-qt.profile
new file mode 100644
index 000000000..02f4665d6
--- /dev/null
+++ b/etc/openshot-qt.profile
@@ -0,0 +1,31 @@
1# Firejail profile for openshot
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/openshot.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7
8noblacklist ${HOME}/.openshot
9noblacklist ${HOME}/.openshot_qt
10
11include /etc/firejail/disable-common.inc
12include /etc/firejail/disable-devel.inc
13include /etc/firejail/disable-passwdmgr.inc
14include /etc/firejail/disable-programs.inc
15
16caps.drop all
17netfilter
18nodvd
19nogroups
20nonewprivs
21noroot
22notv
23protocol unix,inet,inet6,netlink
24seccomp
25shell none
26
27private-dev
28private-tmp
29
30noexec ${HOME}
31noexec /tmp
diff --git a/etc/pinta.profile b/etc/pinta.profile
new file mode 100644
index 000000000..2562e1b80
--- /dev/null
+++ b/etc/pinta.profile
@@ -0,0 +1,33 @@
1# Firejail profile for krita
2# This file is overwritten after every install/update
3# Persistent local customizations
4include /etc/firejail/krita.local
5# Persistent global definitions
6include /etc/firejail/globals.local
7
8include /etc/firejail/disable-common.inc
9include /etc/firejail/disable-devel.inc
10include /etc/firejail/disable-passwdmgr.inc
11include /etc/firejail/disable-programs.inc
12
13caps.drop all
14ipc-namespace
15net none
16nodvd
17nogroups
18nonewprivs
19noroot
20nosound
21notv
22novideo
23protocol unix
24seccomp
25shell none
26
27private-dev
28private-tmp
29
30
31whitelist ~/.config/Pinta
32noexec ${HOME}
33noexec /tmp
diff --git a/etc/scribus.profile b/etc/scribus.profile
index dd06fa59f..a6e86a7d6 100644
--- a/etc/scribus.profile
+++ b/etc/scribus.profile
@@ -36,6 +36,7 @@ notv
36novideo 36novideo
37protocol unix 37protocol unix
38seccomp 38seccomp
39net none
39tracelog 40tracelog
40 41
41#private-bin scribus,gs 42#private-bin scribus,gs
diff --git a/etc/shotcut.profile b/etc/shotcut.profile
index e30bc1f46..4e8b1da05 100644
--- a/etc/shotcut.profile
+++ b/etc/shotcut.profile
@@ -27,5 +27,5 @@ shell none
27#private-bin shotcut,melt,qmelt,nice 27#private-bin shotcut,melt,qmelt,nice
28private-dev 28private-dev
29 29
30noexec ${HOME} 30#noexec ${HOME}
31noexec /tmp 31noexec /tmp
diff --git a/etc/synfigstudio.profile b/etc/synfigstudio.profile
index b0014ace6..1758659f2 100644
--- a/etc/synfigstudio.profile
+++ b/etc/synfigstudio.profile
@@ -25,8 +25,9 @@ novideo
25protocol unix 25protocol unix
26seccomp 26seccomp
27shell none 27shell none
28net none
28 29
29#private-bin synfigstudio 30#private-bin synfigstudio,synfig,ffmpeg
30private-dev 31private-dev
31private-tmp 32private-tmp
32 33
diff --git a/etc/tar.profile b/etc/tar.profile
index f14894c25..6ac530b15 100644
--- a/etc/tar.profile
+++ b/etc/tar.profile
@@ -18,6 +18,7 @@ notv
18novideo 18novideo
19shell none 19shell none
20tracelog 20tracelog
21caps.drop all
21 22
22# support compressed archives 23# support compressed archives
23private-bin sh,bash,dash,tar,gtar,compress,gzip,lzma,xz,bzip2,lbzip2,lzip,lzop 24private-bin sh,bash,dash,tar,gtar,compress,gzip,lzma,xz,bzip2,lbzip2,lzip,lzop
diff --git a/etc/unrar.profile b/etc/unrar.profile
index 12559a721..881572521 100644
--- a/etc/unrar.profile
+++ b/etc/unrar.profile
@@ -18,6 +18,7 @@ notv
18novideo 18novideo
19shell none 19shell none
20tracelog 20tracelog
21caps.drop all
21 22
22private-bin unrar 23private-bin unrar
23private-dev 24private-dev
diff --git a/etc/unzip.profile b/etc/unzip.profile
index 9828fa9b4..f913385fb 100644
--- a/etc/unzip.profile
+++ b/etc/unzip.profile
@@ -18,6 +18,7 @@ notv
18novideo 18novideo
19shell none 19shell none
20tracelog 20tracelog
21caps.drop all
21 22
22private-bin unzip 23private-bin unzip
23private-dev 24private-dev
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-01 05:13:49 +0000